Collaborate Disseminate
I have an ecommerce website with over 5 million customer database. From past couple of days, probably a hacker is hitting an AJAX endpoint continuously. This endpoint takes email address as a parameter and returns whether that email addres… Continue reading Stop User Enumeration requests on AJAX endpoints
I have an ecommerce website with over 5 million customer database. From past couple of days, probably a hacker is hitting an AJAX endpoint continuously. This endpoint takes email address as a parameter and returns whether that email addres… Continue reading Stop User Enumeration requests on AJAX endpoints
I am currently doing bug bounty on a company which uses GRAPHQL for their query language and would like to check if CSRF is possible. After playing around with burpsuite I have conclude the following;
Company doesn’t use csrf token when f… Continue reading CSRF on GraphQL endpoint
I have a simple static webpage that lets users sign-up for a newsletter. Once they enter their email address, it gets sent to a public endpoint (AWS Lambda). This lambda function forwards the email address to a subscription list manager en… Continue reading How to secure an email subscription endpoint?
There are some EPP solutions that are considered very innovative (Crowdstrike, SentinelOne…) for the use of Behavior Monitoring. What is the difference with more standard EPP solution (ex. Symantec Endpoint Protection) that have also som… Continue reading Behavior Monitoring in Endpoint Protection Platform
Yo listen up here’s the story about a little guy who’s internet uplink is mostly compromised, same with the rest of the family including smarthpones, routers …
And all day and all night he is thinking if an own VOIP server … Continue reading Using VOIP encryption when all endpoints are compromised
Sysmon fails to use EventFiltering properties written in config file. I am trying to use,for example, this kind of config to detect network activity from powershell process:
<Sysmon schemaversion=”4.21″>
<HashA… Continue reading Sysmon fails to use config file in Windows 7
I have an existing endpoint, for example https://api.example.com/ … I have an existing CORS policy enabled which only allows access from origin example.com.
However, when I visit the endpoint URL directly (ie. https://api…. Continue reading Secure endpoint for root domain only, no subdomains
Can an endpoint security solution be loaded onto a Heroku instance?
Are there any tools that one can reliably use for decompiling malicious executables in order to understand the inner workings of the same? Or any other reliable tool/way to quickly derive the code?
Continue reading Tools for reverse engineering malicious executables?